Revolut says no direct demand received over alleged data breach
Fintech company Revolut states it has received no direct demand regarding a data-extortion situation following a September 2026 data breach. The online bank experienced a worldwide service outage on 20 October 2026, which disrupted mobile banking, transfers, and account access. Thousands of users registered issues on Downdetector as operations went dark. The company asserts that customer funds and data remain safe despite the disruption. Revolut operates with a Lithuanian banking licence and provides a European Union customer base of over 52 million users protected by deposit guarantee scheme coverage.
Listen to Live Briefing
Real-time synthesized voice briefing · Live Feeds Desk
- ✓ Revolut stated that no direct demand has been received over the alleged data breach.
- ✓ A power failure at Google Cloud's London data center disrupted the Revolut neobank and UK financial services on 20 October 2026.
- ✓ The online bank reported that customers' money and data are safe amid the service disruptions.
- ✓ Thousands of users reported issues with the Revolut app, mobile banking services, and transferring funds on Downdetector.
What changed
Revolut addressed its security status and recent service disruptions while handling external claims of data extortion.
Live updates
-
Revolut Faces Scrutiny Amid Outages and Data Extortion Claims
Fintech company Revolut states it has received no direct demand regarding a data-extortion situation following a September 2026 data breach. The online bank experienced a worldwide service outage on 20 October 2026, which disrupted mobile banking, transfers, and account access. Thousands of users registered issues on Downdetector as operations went dark. The company asserts that customer funds and data remain safe despite the disruption. Revolut operates with a Lithuanian banking licence and provides a European Union customer base of over 52 million users protected by deposit guarantee scheme coverage.
Why it matters
The recent operational disruption stems from a power failure at Google Cloud's London data center. This technical failure compounded security concerns following an earlier data leak that exposed customer passports, IBANs, and Bitcoin transaction histories. Cybersecurity analysts stress that data release processes require rigorous formal verification steps to prevent fraudulent information requests from real government agency domains.
What is confirmed
- Revolut stated that no direct demand has been received over the alleged data breach.
- A power failure at Google Cloud's London data center disrupted the Revolut neobank and UK financial services on 20 October 2026.
- The online bank reported that customers' money and data are safe amid the service disruptions.
- Thousands of users reported issues with the Revolut app, mobile banking services, and transferring funds on Downdetector.
Still unconfirmed
- Hackers allegedly gave Revolut a 24-hour deadline to pay a 3 million dollar ransom or face the sale of stolen data to other criminals.
What to watch next
- Confirmation of any direct extortion demands made to Revolut by threat actors
- Official updates from Revolut regarding full operational restoration across all affected international markets
- Regulatory responses to the combined data breach and cloud infrastructure outage
confidence 90%Sources used for this update (15)
- recentbreaches.com — Recent Breaches: Latest Data Breach News & Live Tracker (2026)
- www.serus.ai — Recent Data Breaches: Full List, Updated Daily — Serus
- insidetelecom.com — Revolut Neobank Questioned on Reliability - insidetelecom.com
- www.irishexaminer.com — Revolut says customers’ money and data are safe amid service ...
- tech.co — Data Breaches That Have Happened This Year (2026 Update)
- jen.jiji.com — Alzheimer, neurologist Padovani: "Rapid photographs reality and assistance perspectives"
- iamnotavillain.net — ImNotAVillain News: Revolut Leak Tracker
- kohenavocats.com — Revolut Down: What Happened to Your Money and How to Get It ...
- www.cloaked.com — Revolut Outage: What to Do Next When a Fintech App Goes Dark
- www.prsol.cc — Revolut outage disrupts online banking operations worldwide
- b2b-cyber-security.de — Conclusions following the Revolut data breach
- www.business-world.fr — FT : Les pirates informatiques demandent une rançon de 3 ...
-
Revolut Confirms Data Breach Exposing 680 Users
Fintech company Revolut confirmed that 680 customer accounts were exposed in a September 2026 data breach after the firm fulfilled a fraudulent request sent from a real government agency email domain. The incident leaked passports, IBANs, and Bitcoin transaction histories, leaving attackers with access for five months. Revolut is paying for replacement identity documents for affected users. Separately, the company addressed a worldwide online banking outage.
Why it matters
The September security incident compounds pressure on the financial technology firm following a second security event involving US brokerage partner DriveWealth. Swiss customers are among those affected by the account data theft. Revolut continues to manage technical disruptions alongside the fallout from compromised customer credentials.
What is confirmed
- Revolut confirmed a September 2026 data breach that exposed the passports, IBANs, and Bitcoin history of 680 users.
- Revolut told affected customers on 11 September 2026 that it fulfilled a fraudulent request originating from a real government agency email domain.
- Revolut is paying for replacement identity documents for customers caught up in the data theft.
Still unconfirmed
- Attackers had access to accounts for five months during the security incident.
What to watch next
- Further disclosures from Revolut regarding the worldwide online banking outage
- Additional regulatory scrutiny or customer compensation updates regarding the DriveWealth security incident
confidence 100%Sources used for this update (5)
- safeguard.sh — Revolut gave customer data to a fake government request in
- shattered.io — Revolut Data Breach 2026: IDs, IBANs of 680 Users Exposed
- www.bleepingcomputer.com — Revolut outage disrupts online banking operations worldwide
- vpn.social — Revolut Pays for New IDs After 680-Account, 5-Month Breach
- yespunjab.com — US Republican Bill Seeks Merit-Based H-1B System, End to Diversity Visa Lottery - Yes Punjab News
-
Revolut reports second data breach via partner DriveWealth
Revolut has confirmed a second security incident in several days, this time originating from its US brokerage partner DriveWealth. This follows a separate breach where hackers used fraudulent requests impersonating an Italian government authority to steal data from 680 clients. In that first incident, exposed information included passports and Bitcoin transaction histories. Revolut is reimbursing affected users for the cost of replacing identity documents. Swiss customers are among those impacted by the account data theft.
Why it matters
These incidents highlight vulnerabilities in how fintechs verify government data requests and manage third-party partner security. The breaches have exposed sensitive personal and financial details, including cryptocurrency records.
What is confirmed
- Revolut is paying for new identity documents for customers affected by the data theft.
- Hackers obtained information from 680 clients by impersonating an Italian government authority.
- Revolut confirmed a second data breach originating from its US brokerage partner DriveWealth.
Still unconfirmed
- The breach exposed Bitcoin transaction histories and passports.
- Swiss-based Revolut customers were targeted in the account-data breach.
What to watch next
- Details on the number of customers affected by the DriveWealth breach
- Regulatory responses to Revolut's identity check failures
confidence 90%Sources used for this update (9)
- jen.jiji.com — "Ruthless and calculating with an insatiable sexual appetite": the harsh accusations in court against Russell Brand
- jen.jiji.com — Mourinho: "At 3-1, everyone thought the game was dead, but instead, the Roma players were dead"
- theoverspill.blog — Start Up No.2762: why nation states will fail to dim the Sun, a quick look at Apple’s HomeView, the cut....
- aphaia.co.uk — Revolut breach shows why government data requests need...
- cryptoticker.io — Revolut Data Breach: Bank Pays for New ID Documents
- www.renascence.io — Revolut Confirms Second Data Breach Tied to DriveWealth ...
- www.crowdfundinsider.com — Revolut, Betterment's Challenging Digital Onboarding And KYC ...
- quivercrypto.com — Revolut jeopardizes customer data after falling for phishing ...
- swissobserver.ch — Swiss Revolut customers targeted in account-data breach
-
Revolut to Cover Document Costs Following Customer Data Breach
Revolut will reimburse customers who need to replace identity documents following a security incident. The bank stated that hackers obtained information belonging to 680 clients after tricking the fintech company with fraudulent requests. These requests impersonated an Italian government authority to bypass standard compliance checks. In response to the exposure of sensitive personal and financial details, the digital bank is paying the expenses for affected users seeking new identity documentation.
Why it matters
This security failure follows a September incident involving US broker DriveWealth, which impacted Revolut trading customers. The latest breach highlights vulnerabilities in institutional verification processes when fintech firms interact with external government entities. Revolut previously reported receiving no direct demand over the alleged data breach before committing to cover document replacement costs.
What is confirmed
- Revolut will cover the cost of replacing identity documents for customers affected by a data breach.
- Hackers obtained information from 680 clients.
- Personal information was disclosed through fraudulent requests impersonating an Italian government authority.
What to watch next
- Confirmation of whether additional clients beyond the reported 680 individuals were compromised.
- Details on potential regulatory fines or investigations into the bypassed compliance checks.
- Measures implemented by Revolut to verify future institutional email requests from government agencies.
confidence 95%Sources used for this update (3)
- www.europesays.com — Revolut will cover costs for customers hit by data hack
- www.fstech.co.uk — Revolut to cover identity document costs after customer data ...
- cyberinsider.co.uk — Revolut to cover document replacement costs after customer ...
-
Revolut faces second September breach via fake government requests
Revolut experienced a second data security incident in September 2026 involving the exposure of sensitive personal and financial information. Scammers used a compromised institutional email account from a government agency to send fraudulent information requests, bypassing the fintech company's compliance checks. This event follows a separate September breach involving DriveWealth, a US broker used by Revolut. While the DriveWealth incident affected trading customers, this second breach involved direct impersonation of government officials to obtain customer data.
Why it matters
The incidents highlight security risks associated with KYC and financial compliance data. Revolut is currently seeking a formal banking presence in Switzerland, where some targeted customers are based.
What is confirmed
- Revolut suffered two separate data security incidents in September 2026.
- A US broker called DriveWealth experienced a cyber attack that exposed profile and contact data of Revolut customers.
- Revolut disclosed customer data to scammers who posed as a government agency using a legitimate email domain.
- The impersonation scam was detected before September 12, 2026.
Still unconfirmed
- Hackers demanded a 3 million ransom after compromising 700 European Revolut customers via the Reggio Calabria prefecture email account.
- The data breach affected customers based in Switzerland.
What to watch next
- Confirmation of the total number of customers affected by the government impersonation scam
- Official response from the Reggio Calabria public prosecutor regarding the blackmail investigation
confidence 90%Sources used for this update (12)
- timesofindia.indiatimes.com — SC refuses interim stay on MDR for UPI transactions, asks Centre to explain decision
- thearabianpost.com — Revolut discloses customer data leak after email scam
- zibersegurtasun.euskadi.eus — Brecha de datos en Revolut tras solicitudes gubernamentales ...
- dipanshuc9.substack.com — When KYC Becomes a Security Risk: What the Revolut Data ...
- www.supportbook.com — Revolut Data Breach 2026: Security Failures, Past Breaches ...
- breached.company — Revolut Breach: Fake Government Emails Beat Compliance
- jen.jiji.com — Superenalotto, winning combination numbers today October 3
- www.fraudbeat.com — Revolut Breach Redux As Neobank Faces Security Issues Again ...
- www.teiss.co.uk — teiss - News - Second data breach hits Revolut after service ...
- beinsure.com — DriveWealth breach exposes data of Revolut trading customers
- cde.news — Data of 700 European Revolut customers compromised in hack ...
- swissobserver.ch — Swiss-based Revolut customers targeted in data breach
-
Revolut Suffers Second Data Breach in Month via DriveWealth
Fintech company Revolut faces its second data breach in September following a social engineering attack on its former US broker, DriveWealth. The incident exposed profile and contact data belonging to Revolut customers, including users in Ireland. Revolut states that no passwords, card details, or identity documents were compromised during this third-party security event. Other platforms such as Stake and Hatch were also affected by the DriveWealth breach.
Why it matters
The September security incidents highlight ongoing vulnerabilities tied to third-party vendor relationships and social engineering tactics in the financial technology sector. Revolut previously managed an incident where customer KYC data was shared with an attacker posing as a government agency. These successive exposures raise regulatory and customer security concerns regarding how financial platforms verify official requests and partner access.
What is confirmed
- Revolut customers faced a second data breach in September tied to third-party broker DriveWealth.
- The DriveWealth breach originated from a social engineering attack that occurred on September 4 and 5.
- Revolut confirmed that no passwords, card details, or ID documents were exposed in the DriveWealth incident.
- Irish Revolut customers are among those impacted by the third-party data breach.
- Platforms Stake and Hatch were also affected by the DriveWealth breach.
Still unconfirmed
- Attackers launched an extortion site demanding 6,000 Monero, valued at roughly $3 million, under the threat of selling stolen records.
What to watch next
- Official statements from DriveWealth regarding the full scope of the social engineering attack.
- Regulatory investigations into the handling of customer data by Revolut and its third-party partners.
- Additional disclosures regarding whether impacted US trading data will be leaked or used in extortion attempts.
confidence 90%Sources used for this update (7)
- synctric.io — Revolut Breach: How a Fake Government Request Worked | Synctric
- coinalertnews.com — Revolut Customers Hit by Second Data Breach Tied to DriveWealth
- thenextweb.com — DriveWealth breach exposes data of Revolut customers who ...
- www.rte.ie — Irish Revolut customers impacted by data breach - RTÉ
- finance.yahoo.com — Revolut Customers Hit by Second Data Breach in Just One Month
- protos.com — Revolut reveals customer data breached twice this month
- www.crowdfundinsider.com — Revolut Customers Caught in DriveWealth Data Breach After ...
-
Revolut Breach Notices Reach US Users
Revolut customers face new warnings regarding a September cyberattack after DriveWealth confirmed a data breach affecting historic US trading data. Revolut previously maintained that no individual or group made direct contact following a September 12 impersonation scam that exposed data from approximately 680 customers, including high-net-worth crypto holders. While Revolut reports that user funds remain unaffected and authorities received notifications, external reports contradict this stance by alleging that attackers launched an extortion site demanding 6,000 Monero, valued at roughly $3 million, under the threat of selling the stolen records.
Why it matters
The incident highlights vulnerabilities tied to third-party financial partners handling legacy data. DriveWealth serves as a former broker holding historic US trading information for Revolut users. Discrepancies persist between official corporate statements and external reports regarding extortion demands.
What is confirmed
- Revolut customers are receiving warnings that historic US trading data held by former broker DriveWealth may have been exposed in a September cyberattack.
Still unconfirmed
- Attackers have launched an extortion site demanding 6,000 Monero, valued at roughly $3 million, under threat of selling stolen records.
What to watch next
- Confirmation of the exact volume of user data exposed through DriveWealth
- Official statements from DriveWealth regarding the scope of the hack
confidence 100%Sources used for this update (3)
- jen.jiji.com — Simone Biles, three masked men in house and stolen Porsche
- jen.jiji.com — La Spezia, woman remains stuck for hours on a rock in the sea: "We saved her, she was hypothermic"
- www.cryptotimes.io — Revolut Data Breach Notices Hit Former US Trading Users as DriveWealth Confirms Hack: What Was Exposed
-
Revolut denies direct ransom demands following customer data exposure
Revolut maintains that no individual or group has made direct contact or demands following a September 12 impersonation scam. The breach exposed data from approximately 680 customers, including high-net-worth crypto holders. While the company reports that funds remain unaffected and authorities have been notified, external reports contradict this claim. Attackers have reportedly launched an extortion site demanding 6,000 Monero, valued at roughly $3 million, under threat of selling the stolen records.
Why it matters
Hackers spent months posing as Italian law enforcement to deceive Revolut into releasing sensitive documents. Stolen data includes passports, selfies, and full transaction histories. This incident highlights risks associated with KYC mandates and identity theft.
What is confirmed
- An impersonation scam on September 12 exposed data of about 680 customers.
- Revolut states no individual or group has made direct contact or demands.
- The company notified authorities and reports that customer funds were not affected.
- Attackers posed as Italian law enforcement to obtain passports, selfies, and transaction histories.
Still unconfirmed
- Attackers are demanding 6,000 Monero, worth roughly $3 million, via an extortion site.
- The stolen data specifically targets high-net-worth crypto holders.
What to watch next
- Confirmation of the identity of the group claiming responsibility
- Evidence of stolen data being sold or leaked on the dark web
- Official statements from the impersonated Italian agency
confidence 90%Sources used for this update (6)
- www.briefs.co — Revolut Says No Direct Ransom Approach After Customer Data Exposure
- jen.jiji.com — Health, orthognathodontist Riatti: "In developmental age it's not just about aligning teeth"
- www.yahoo.com — Revolut Hacker Launches Extortion Site Demanding $3M After 680 Customer Data Breach
- www.yahoo.com — Hackers Want $3 Million in Monero for Revolut’s Stolen Bitcoin Records. What Affected Customers Should Do Now
- www.insurancejournal.com — Revolut Says No Group Has Made Direct Contact After Data Breach
- news.bitcoin.com — Revolut Denies Hacker Contact Over Reported $3M Ransom Claim
-
Revolut denies direct ransom demand following customer data breach
Revolut has confirmed a data breach affecting 680 customers but denies receiving direct contact or ransom demands from the attackers. The breach occurred after hackers spent five months using fake government requests and infostealers to impersonate an Italian agency. While the company denies direct communication, multiple reports indicate that the attackers are demanding a $3 million ransom in Monero and have threatened to sell the stolen data within 24 hours.
Why it matters
The breach targeted high-profile accounts through elaborate social engineering. This incident highlights vulnerabilities in how financial institutions verify government data requests.
What is confirmed
- Revolut confirmed a data breach affecting 680 customers.
- Hackers used fake government requests to obtain customer information.
- A company spokesperson told Reuters that Revolut has had no direct contact or demand from the group claiming responsibility.
Still unconfirmed
- Attackers demanded a $3 million ransom in Monero.
- Hackers threatened to sell customer data within 24 hours.
- The attackers impersonated an Italian government agency for five months.
- The breach targeted 680 high-profile accounts.
What to watch next
- Confirmation of whether the stolen data is published or sold
- Official statement from the Italian government regarding the impersonation
- Further technical details on the infostealers used in the social engineering attack
confidence 80%Sources used for this update (10)
- Reuters — Revolut says no direct demand received over alleged data breach
- Financial Times — Hackers demand Revolut pay $3mn ransom after data breach
- TechCrunch — Revolut confirms customer data breach through fake government requests
- CoinDesk — Revolut hackers demand $3 million in Monero, threaten to sell customer data
- InfoStealers — Revolut Hackers Used Infostealers for Elaborate Social Engineering
- www.channelnewsasia.com — Revolut says no direct demand received over alleged data breach
- www.securityweek.com — Revolut Data Breach: 5 Months, 680 High-Profile Accounts, $3M Ransom
- coincentral.com — Revolut Hackers Demand $3 Million in Monero After Customer Data Breach
- coinpedia.org — Revolut Hackers Demand $3M in XMR, Give 24 Hours to Pay
- cryptobriefing.com — Revolut says no ransom demand received after reported data breach
Community Sentiment: How do you assess this situation?
Voice your perspective · Real-time aggregated sentiment from the Live Feeds community